Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/83uDL26oFjmE6-QOHsF2uwbvsnk.roa
File: 83uDL26oFjmE6-QOHsF2uwbvsnk.roa (raw, json)
Hash identifier: D/UVreFAse6odxhNyJXZ4P2uPftMq1UNbNQVxZgVbWM=
Subject key identifier: F3:7B:83:2F:6E:A8:16:39:84:EB:E4:0E:1E:C1:76:BB:06:EF:B2:79
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 10DD
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/83uDL26oFjmE6-QOHsF2uwbvsnk.roa
Signing time: Sun 09 Mar 2025 16:19:07 +0000
ROA not before: Sun 09 Mar 2025 16:19:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4317 (0x10dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 9 16:19:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F37B832F6EA8163984EBE40E1EC176BB06EFB279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:67:6b:b2:1b:8d:09:33:c5:f8:cf:e7:a2:
04:62:06:ae:e0:b5:d9:ab:20:84:8c:d3:d1:e6:96:
a5:7d:13:b3:e9:56:c7:8d:ed:f6:b9:d7:cc:4b:cd:
7c:cf:bd:e2:d3:ed:7e:d2:06:2a:b7:0c:79:1a:95:
38:2f:a4:aa:8b:1d:b8:93:ec:d8:86:42:17:b5:7a:
24:b3:87:6b:4c:5e:02:cf:95:ee:13:3d:dd:f6:93:
48:17:d9:35:19:2e:25:d3:61:89:6c:bc:ef:7f:96:
4e:f0:69:bb:2d:df:12:65:9c:a0:73:bd:6f:05:07:
e1:71:e9:07:f5:82:d6:7d:7d:21:88:36:be:fa:f0:
12:d9:16:39:2e:2b:1f:ca:cd:f2:74:11:49:29:90:
aa:74:14:bd:cc:80:ee:e7:5a:db:47:f6:27:4e:c0:
8b:51:e1:93:7b:1d:e2:35:9e:29:e5:e0:e1:b0:13:
ca:91:dc:0d:1a:9b:81:ba:40:18:26:7c:83:2f:06:
0c:dd:e2:e5:6d:6d:a6:be:99:7f:90:41:fd:6c:11:
cf:92:03:b7:66:c5:cf:bf:03:f5:2a:77:61:75:c7:
59:d4:7c:4c:b9:c1:2e:7e:7a:ac:cd:a5:a6:8a:ba:
e2:d2:24:93:0a:26:12:45:ae:23:ab:c2:5a:c3:83:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:83:2F:6E:A8:16:39:84:EB:E4:0E:1E:C1:76:BB:06:EF:B2:79
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/83uDL26oFjmE6-QOHsF2uwbvsnk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.20.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:76:29:07:aa:2d:62:e2:c9:f8:01:e2:68:35:a7:1e:22:a8:
a8:58:dd:6a:51:85:e9:0d:8b:6c:9d:3f:26:b6:95:ee:4a:33:
22:72:de:ff:5d:d1:9d:43:45:ec:97:5a:08:1d:f1:7e:6f:14:
35:c5:bd:5f:51:6d:60:5f:bd:7f:e5:fd:01:6b:13:3f:12:8c:
3d:a0:87:21:18:fd:d8:dd:ff:6c:21:61:eb:6b:9f:86:18:19:
93:fa:c9:2d:fb:5b:ce:0c:91:a9:14:41:ed:ee:6a:fc:1b:cb:
56:e2:1d:5e:92:1f:b1:4b:35:92:59:9d:24:08:ad:75:61:20:
6b:71:1d:fc:ec:58:7f:6a:6f:67:cf:71:03:e3:04:03:ce:0f:
5c:fc:4b:60:ab:bb:1a:61:c3:1d:4f:a5:e4:58:b4:4d:bd:3e:
0b:26:80:36:ce:8f:f5:0f:af:23:ff:9e:25:8a:b1:1e:04:5d:
1f:17:12:6b:ed:7b:cf:3c:50:b3:e9:76:1a:77:04:9a:85:9d:
4d:fa:fe:f2:15:ad:77:78:d0:81:ed:2c:3c:84:33:dd:43:7f:
71:8c:9a:2e:a4:57:d0:ef:63:5b:62:22:b1:ce:c5:52:89:1a:
d6:75:95:25:c6:db:27:ac:ac:f6:85:1f:76:5a:35:9f:ba:e5:
df:54:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:12 2025 by rpki-client